How It Works

  1. Create your plugin following the Plugin SDK
  2. Sign your manifest with your private key
  3. Submit the signed manifest below
  4. Review - we verify signatures and run security checks
  5. Publish - your plugin appears in the registry

Submit Plugin Manifest

Paste your signed manifest JSON or
The KeyID that signed this manifest

Requirements

  • Valid signed manifest with Dilithium3-test signature
  • Plugin must be open source (license declared)
  • No network egress without declared capabilities
  • No filesystem write access without justification
  • No environment variable access without justification

Submit via CLI

# Install the submission tool
cargo install progit-plugin-submit

# Submit your plugin
progit-submit ./my-plugin/.progit-plugin.json --keyid 18a10eb52cf3c001

# Or pipe from stdin
cat manifest.json | progit-submit --keyid 18a10eb52cf3c001